Analysis
- max time kernel
149s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
05/03/2026, 03:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe
Resource
win10v2004-20260130-en
4 signatures
150 seconds
General
- Target c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe
- Size 4.1MB
- Sample260305-d8xp1sds9w
- SHA256 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac
- MD5 950e0691b2265de1e9fc3f611ace83e6
- SHA1 61ce50a0d4ad57bf5098a3442c1f5cff6932834d
- SHA512 abc9890c8e15428bc19e40b59988586a12b8ec2cbb5e70eeafd28476caf3bd3fbcd9ce1e38d739bcc5a8683220d599e85a6ee889d20388b6f94604580de9083c
- SSDEEP 24576:QPxDxpLqe7BlO3ShLxPB8ofAhN3zhVo2I0dfj:QPdLqSZNfCN3z7oNuf
- TLSH T17816C081AD20CE5ECF645039B4EAA1E815BF6A7EDC492042C9E23740F937D6F7336925
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Extracted
Family
-
chromeb
C2
-
iloveboats9.vip
Signatures
- Chromeb family
- Detects ChromeB stealer 3 IoCs
resource yara_rule behavioral2/memory/5704-1-0x000002AE102C0000-0x000002AE1041E000-memory.dmp family_chromeb behavioral2/memory/5704-16-0x000002AE102C0000-0x000002AE1041E000-memory.dmp family_chromeb behavioral2/memory/5704-19-0x000002AE102C0000-0x000002AE1041E000-memory.dmp family_chromeb - Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe 5704 c2151fad4cb696332923727c9772506783720f185d9e8a946ead2f039bd7fbac.exe